Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/McQVtJfmSUuREC4ctSvds6Ro0XQ.roa
File: McQVtJfmSUuREC4ctSvds6Ro0XQ.roa (raw, json)
Hash identifier: GJauw5A6mrgAmlFdVlksmzzKLcLRP+I39eqY2vp3W3k=
Subject key identifier: 31:C4:15:B4:97:E6:49:4B:91:10:2E:1C:B5:2B:DD:B3:A4:68:D1:74
Certificate issuer: /CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Certificate serial: 01856E6FD2D1B5A97E771863ED2A0DE86DBA
Authority key identifier: C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/McQVtJfmSUuREC4ctSvds6Ro0XQ.roa
Signing time: Sun 01 Jan 2023 17:45:00 +0000
ROA not before: Sun 01 Jan 2023 17:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207626
IP address blocks: 185.92.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:d2:d1:b5:a9:7e:77:18:63:ed:2a:0d:e8:6d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Validity
Not Before: Jan 1 17:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31c415b497e6494b91102e1cb52bddb3a468d174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:df:7b:32:17:e5:37:9d:3f:cd:ee:fe:1f:
b6:58:32:e6:06:74:db:c4:cd:0d:f4:b7:d3:06:24:
b3:47:46:65:58:12:71:12:96:f8:aa:ab:83:e0:bb:
39:87:8a:60:ea:63:f7:a3:4c:e2:92:b5:19:44:c6:
35:10:ee:bd:88:20:9a:55:61:85:58:ef:83:c8:91:
bd:cb:61:84:fc:f8:58:f3:95:0d:9e:88:05:da:d6:
28:39:01:09:5c:be:84:60:23:f6:7a:d2:30:32:cd:
7b:c5:1c:da:ae:c4:ec:b7:df:1c:59:30:32:9e:f7:
21:f4:b8:91:ee:9d:5b:e8:49:da:58:2e:4f:89:3e:
e7:09:eb:35:e9:2b:3e:de:b5:54:48:24:f8:53:96:
2c:e1:ee:06:4b:03:69:20:51:d2:ba:5c:ce:96:8e:
3b:1b:4b:22:39:55:1a:07:77:0d:5f:0d:47:c4:40:
25:5f:14:18:7c:f4:fa:8b:73:c5:45:09:de:a8:d0:
8e:0a:01:27:d0:c1:f1:6e:e0:c0:94:7a:70:8a:38:
42:1d:11:28:7d:98:98:5a:25:3c:dd:77:b1:c8:d6:
0a:cb:81:7d:d5:5a:c5:91:6c:27:54:5f:bd:e5:bb:
55:25:53:12:9d:31:4b:9f:9c:cb:3e:d4:07:cd:5d:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C4:15:B4:97:E6:49:4B:91:10:2E:1C:B5:2B:DD:B3:A4:68:D1:74
X509v3 Authority Key Identifier:
keyid:C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/McQVtJfmSUuREC4ctSvds6Ro0XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3f:98:2e:ca:17:78:a1:ab:86:a9:c8:63:7a:e9:96:47:27:
bd:4f:ce:68:c2:f1:e7:58:3b:97:b1:eb:36:12:0f:4a:37:12:
a3:58:8d:20:98:77:b1:a6:8b:d7:5b:ad:15:be:a6:09:52:58:
63:25:a3:33:22:37:b3:22:74:40:69:ae:b3:59:f8:c2:32:2e:
02:21:df:b6:75:91:07:b9:5d:a7:12:0c:5e:ef:8d:de:23:9b:
fb:5c:9a:32:55:22:ee:0e:61:c4:de:14:46:4e:de:2c:60:db:
51:c8:f8:49:4e:42:86:33:c2:17:c8:2d:79:82:8f:77:33:9a:
01:48:4a:33:3d:c2:22:aa:79:c9:19:82:21:50:65:93:5e:eb:
34:c4:d2:41:56:ab:24:ce:2a:64:27:85:f4:5d:7a:8e:75:b3:
14:21:c6:ec:42:91:70:d1:01:c0:fb:d6:65:01:d4:29:67:24:
c9:0c:69:92:57:38:24:e7:11:c1:00:46:04:66:02:cf:c9:21:
c6:40:46:85:e1:55:b2:80:e0:56:b0:36:a5:c5:24:f4:b6:0e:
b8:7d:e4:33:e3:d8:6f:e4:3e:10:ab:b3:d7:ec:ef:c2:2c:7f:
0f:8e:49:d0:7a:06:8b:8a:9a:ca:f1:d9:ab:e4:a8:da:1b:58:
a9:3b:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org